Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: FGznI0XPw3t7V1FgmLxjk9tPbKgDIx/ztdL+/xFE9W0=
Subject key identifier: D0:86:66:C2:1A:F4:B9:AF:F9:D3:1B:39:F2:82:9F:81:18:8E:B5:F8
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 01A0D3EF626DAA688373F3B632C7137A1619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 01EC
Signing time: Thu 24 Sep 2026 15:01:15 +0000
Manifest this update: Thu 24 Sep 2026 15:01:15 +0000
Manifest next update: Fri 25 Sep 2026 15:01:15 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: 2122YKirfbsbMs8R/kjmciMSPVDUAjU8tFCd9FlHLeU=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:62:6d:aa:68:83:73:f3:b6:32:c7:13:7a:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Sep 24 15:01:15 2026 GMT
Not After : Sep 25 15:01:15 2026 GMT
Subject: CN=d08666c21af4b9aff9d31b39f2829f81188eb5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:5f:bc:04:6c:47:47:06:1e:80:b0:c3:f2:
7b:50:e5:d4:f8:6c:7c:e7:59:ab:98:93:50:f3:b3:
e3:84:6f:bc:4b:bb:bf:b8:06:06:0b:87:3e:d1:2c:
cd:34:f3:14:0c:50:67:f0:fa:fe:56:a4:e8:f9:03:
89:01:05:ad:79:a1:bd:53:0c:9f:41:03:62:19:31:
99:0e:f7:1f:93:4b:b0:5c:a0:ce:25:43:c8:fe:49:
bf:6a:82:b2:0c:26:f5:65:75:97:67:a4:82:06:6a:
6b:e0:12:46:06:ac:f8:ed:98:9b:76:a7:a8:e8:f3:
5c:39:2a:6b:2b:bc:e2:fc:56:6e:98:0e:01:76:2d:
57:32:6c:da:ad:02:84:40:51:34:95:64:8d:93:77:
21:4c:d1:f8:9d:42:36:3d:be:a1:0e:95:57:69:ec:
c5:9f:30:54:c5:48:f9:4b:65:5c:14:26:74:43:f0:
35:47:2a:7a:94:94:6e:e2:f7:03:90:27:3b:a8:c2:
95:9f:8b:35:9a:cb:01:d7:37:34:58:b4:84:c4:a1:
dd:ea:35:aa:69:87:01:b9:37:fe:6a:21:d1:c6:e7:
59:67:b9:bf:c4:11:45:af:bd:7a:5f:ad:bd:40:3b:
31:b8:02:da:90:f8:5f:f8:83:80:55:82:be:30:9a:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:66:C2:1A:F4:B9:AF:F9:D3:1B:39:F2:82:9F:81:18:8E:B5:F8
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5f:5e:5a:d7:5a:db:df:69:d6:c9:f5:62:36:06:54:0c:65:
b1:3d:31:8f:37:78:02:69:10:3d:ef:b9:f8:1e:99:e4:0e:60:
69:37:93:0e:11:1c:a7:a3:84:6e:6e:c3:7c:d1:31:7a:78:8a:
0a:1c:36:70:66:89:4c:8e:63:4b:e6:04:f3:60:a8:b7:47:ef:
e7:d8:c2:2d:d7:a0:2b:37:37:cd:b7:01:62:28:77:cd:af:e9:
d3:d7:1c:cc:65:8d:63:85:92:62:dc:79:d6:c5:aa:a9:73:7a:
ad:35:16:c1:78:a4:e7:6f:9e:c3:6c:8a:14:8b:62:f3:7a:f9:
56:f2:81:3d:d2:9c:d5:3d:25:05:5c:87:10:59:cc:bc:d8:36:
08:28:13:52:1e:2a:4c:04:58:69:09:80:68:f0:aa:b0:4e:d2:
75:3e:ce:6d:92:0c:3e:45:c1:0f:9e:86:06:a1:7b:53:b4:ed:
02:55:73:17:9d:3c:bf:53:a4:4d:8d:92:c3:a4:93:e3:76:f5:
71:8f:22:b7:da:10:e8:c2:76:3a:de:48:51:c2:70:9e:5c:bf:
87:31:7e:92:f6:5f:47:1b:07:23:e2:70:f9:b4:26:16:e6:84:
83:09:0b:1f:72:c1:cf:4c:f0:88:91:d8:06:22:40:81:b9:30:
ee:63:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:44 2026 by rpki-client